diff --git a/.gitignore b/.gitignore index 5759fa9..48d32c6 100644 --- a/.gitignore +++ b/.gitignore @@ -1,18 +1,30 @@ -*.pyo -*.pyc -*.swp -build -.gradle -bin/ -.project -*.iml -.idea/ -eclipse/ -.classpath -logs/ -.settings -target/ +*.pyo +*.pyc +*.swp +build +.gradle +bin/ +.project +*.iml +.idea/ +eclipse/ +.classpath +logs/ +.settings +target/ + +#forge .idea things: +*.ipr +*.iws +# Editor/tooling droppings +.vscode/ +.cursor/ +.codegraph/ +graphify-out/ +*.code-workspace -#forge .idea things: -*.ipr -*.iws \ No newline at end of file +# Local tool installs / build output not meant for version control +mvn-bin/ +dist/ +node_modules/ +*.tar.gz diff --git a/default/app.conf b/default/app.conf index ad18d6b..0ff0a44 100755 --- a/default/app.conf +++ b/default/app.conf @@ -1,21 +1,22 @@ -# -# Splunk app configuration file -# - -[install] -state = enabled -state_change_requires_restart = 0 -is_configured = 0 -build = 1 - -[ui] -is_visible = 1 -label = Minecraft - -[launcher] -author = mpapale@splunk.com -description = The Splunk App for Minecraft let's you visualize your Minecraft server data. -version = 1.0 - -[package] -id = minecraft-app +# +# Splunk app configuration file +# + +[install] +state = enabled +state_change_requires_restart = 0 +is_configured = 0 +build = 1 + +[ui] +is_visible = 1 +label = Minecraft +supported_themes = light, dark + +[launcher] +author = mpapale@splunk.com +description = The Splunk App for Minecraft let's you visualize your Minecraft server data. +version = 1.0 + +[package] +id = minecraft-app diff --git a/logtosplunk-plugin/pom.xml b/logtosplunk-plugin/pom.xml index 33e5b52..3fef39d 100644 --- a/logtosplunk-plugin/pom.xml +++ b/logtosplunk-plugin/pom.xml @@ -8,108 +8,75 @@ 4.0.0 + logtosplunk-plugin - - - - mvnrepository-central - mvnrepository.com Central - https://repo1.maven.org/maven2/ - - - splunk-artifactory - Splunk Releases - https://splunk.jfrog.io/splunk/ext-releases-local - - - - - - org.apache.logging.log4j - log4j-api - 2.25.1 - - - org.apache.logging.log4j - log4j-core - 2.25.1 - - - com.splunk.logging - splunk-library-javalogging - 1.11.8 - - - com.splunk - shared-mc - ${project.version} - - - com.splunk - spigot - ${project.version} - - + pom + org.apache.maven.plugins - maven-shade-plugin - - - ${project.build.directory}/dependency-reduced-pom.xml - - - - 2.4.1 + maven-antrun-plugin + 3.1.0 + collect-dist package - shade + run + + + + + + + + + + + + + + + + + + + + + + + + + + - - - - - include-forge - - - com.splunk - logtosplunk-forge - ${project.version} - - - org.apache.logging.log4j - log4j-api - - - org.apache.logging.log4j - log4j-core - - - com.splunk - splunk-library-javalogging - 1.0.1 - - - com.splunk - shared-mc - ${project.version} - - - com.splunk - spigot - ${project.version} - - - - - diff --git a/logtosplunk-plugin/src/main/config/splunk.properties b/logtosplunk-plugin/src/main/config/splunk.properties index 181fca7..6ca703e 100644 --- a/logtosplunk-plugin/src/main/config/splunk.properties +++ b/logtosplunk-plugin/src/main/config/splunk.properties @@ -1,4 +1,22 @@ splunk.craft.connection.host=127.0.0.1 splunk.craft.connection.port=8088 splunk.craft.token=CHANGEME-1234-5678-1234-123456789012 -splunk.craft.enable.consolelog=true \ No newline at end of file +splunk.craft.enable.consolelog=true + +# --- Extended logging categories (all opt-in; default off) --- +# Combat & survival: damage, kills, healing, hunger, respawn (throttled per player) +splunk.craft.enable.combat=false +# Item economy: pickup, drop +splunk.craft.enable.item=false +# Progression: xp, level, enchant, craft, fish, command +splunk.craft.enable.progression=false +# Server lifecycle: start, weather change +splunk.craft.enable.server=false +# Performance sampler: online players, loaded chunks (TPS/MSPT require Paper API) +splunk.craft.enable.performance=false +# How often (in server ticks, 20 ticks = 1s) to sample performance +splunk.craft.performance.interval_ticks=600 +# Session detail: log client IP on connect (PII -- opt in deliberately) +splunk.craft.enable.session_ip=false +# Session detail: teleport, gamemode change, bed enter, world change +splunk.craft.enable.session_detail=false \ No newline at end of file diff --git a/owasp-suppressions.xml b/owasp-suppressions.xml new file mode 100644 index 0000000..34c7c49 --- /dev/null +++ b/owasp-suppressions.xml @@ -0,0 +1,55 @@ + + + + + + + CVE-2026-53914: affects all kotlin-stdlib versions, no fix available. kotlin-stdlib + is a transitive dep from okhttp3 via splunk-library-javalogging; we write no Kotlin code. + Pinned to 2.0.21 (latest); re-evaluate when a fixed kotlin-stdlib version is published. + ^pkg:maven/org\.jetbrains\.kotlin/kotlin\-stdlib.*@.*$ + CVE-2026-53914 + + + + + CVE-2020-29582: Kotlin scripting temp-dir exposure. We don't use Kotlin scripting; + kotlin-stdlib is a transitive dep from okhttp3/splunk-library-javalogging. + ^pkg:maven/org\.jetbrains\.kotlin/kotlin\-stdlib.*@.*$ + CVE-2020-29582 + + + + + + False positive: shared-mc JAR matched to Minecraft game CPE due to "minecraft" in + project path and "SNAPSHOT" in version. CVE-2023-33245 and CVE-2021-35054 are Minecraft + game vulnerabilities, unrelated to this library. + ^pkg:maven/com\.splunk/shared\-mc@.*$ + CVE-2023-33245 + + + False positive — same reason as CVE-2023-33245 above. + ^pkg:maven/com\.splunk/shared\-mc@.*$ + CVE-2021-35054 + + + diff --git a/pom.xml b/pom.xml index bd12947..fb65c0e 100644 --- a/pom.xml +++ b/pom.xml @@ -6,49 +6,116 @@ splunk.minecraft.app 1.0-SNAPSHOT - spigot shared-mc + spigot + paper forge + neoforge logtosplunk-plugin pom - + + + 21 + UTF-8 + + 1.21.1 + spigot + 1.21.1-R0.1 + + mvnrepository-central mvnrepository.com Central https://repo1.maven.org/maven2/ + + papermc + Paper Maven + https://repo.papermc.io/repository/maven-public/ + + + spigot-repo + Spigot Snapshots + https://hub.spigotmc.org/nexus/content/repositories/snapshots/ + + + + org.jetbrains.kotlin + kotlin-stdlib + 2.0.21 + + + org.jetbrains.kotlin + kotlin-stdlib-common + 2.0.21 + + + org.jetbrains.kotlin + kotlin-stdlib-jdk7 + 2.0.21 + + + org.jetbrains.kotlin + kotlin-stdlib-jdk8 + 2.0.21 + + org.apache.logging.log4j log4j-api 2.25.1 + provided org.apache.logging.log4j log4j-core 2.25.1 + provided com.splunk.logging splunk-library-javalogging 1.11.8 + + com.google.code.gson + gson + 2.13.2 + + + com.google.guava + guava + 33.5.0-jre + + + org.apache.httpcomponents.core5 + httpcore5 + 5.3.6 + + + org.apache.httpcomponents.client5 + httpclient5 + 5.5.1 + junit junit - 4.8.2 + 4.13.2 test - - com.googlecode.json-simple - json-simple - 1.1 - @@ -56,10 +123,26 @@ org.apache.maven.plugins maven-compiler-plugin - 2.3.2 + 3.14.0 + + 21 + + + + org.owasp + dependency-check-maven + 12.1.0 - 1.8 - 1.8 + 7.0 + + true + + false + + ${maven.multiModuleProjectDirectory}/owasp-suppressions.xml + diff --git a/shared-mc/pom.xml b/shared-mc/pom.xml index 5e0ba66..8dec369 100644 --- a/shared-mc/pom.xml +++ b/shared-mc/pom.xml @@ -26,43 +26,30 @@ org.apache.logging.log4j log4j-api - 2.25.1 org.apache.logging.log4j log4j-core - 2.25.1 org.apache.httpcomponents.core5 httpcore5 - 5.3.6 org.apache.httpcomponents.client5 httpclient5 - 5.5.1 com.google.guava guava - 33.5.0-jre com.google.code.gson gson - 2.13.2 com.splunk.logging splunk-library-javalogging - 1.11.8 - - com.googlecode.json-simple - json-simple - 1.1 - - junit junit diff --git a/shared-mc/src/main/java/com/splunk/sharedmc/SingleSplunkConnection.java b/shared-mc/src/main/java/com/splunk/sharedmc/SingleSplunkConnection.java index 0f4af0b..f1a7bd8 100644 --- a/shared-mc/src/main/java/com/splunk/sharedmc/SingleSplunkConnection.java +++ b/shared-mc/src/main/java/com/splunk/sharedmc/SingleSplunkConnection.java @@ -24,8 +24,6 @@ import org.apache.hc.client5.http.impl.classic.CloseableHttpResponse; import org.apache.hc.core5.io.CloseMode; -import org.json.simple.JSONObject; - /** * Knows a single Splunk instance by its host:port and forwards data to it. */ @@ -84,6 +82,20 @@ public void run() { } } + /** + * Wraps a raw event message in the Splunk HTTP Event Collector JSON envelope: + * {@code {"event": ""}}. Built with gson (replaced the previous json-simple + * dependency). Package-private for testing. + * + * @param message The raw event message to wrap. + * @return The HEC envelope as a JSON string. + */ + static String buildHecEnvelope(String message) { + com.google.gson.JsonObject event = new com.google.gson.JsonObject(); + event.addProperty("event", message); + return event.toString(); + } + /** * Queues up a message to send to this Spunk connections' Splunk instance. * @@ -91,11 +103,7 @@ public void run() { */ @Override public void sendToSplunk(String message) { - JSONObject event = new JSONObject(); - //message = Calendar.getInstance().getTime().toString() + ' ' + message; - event.put("event", message); - - messagesToSend.append(event.toString()); + messagesToSend.append(buildHecEnvelope(message)); } private boolean sendData() { diff --git a/shared-mc/src/main/java/com/splunk/sharedmc/event_loggers/AbstractEventLogger.java b/shared-mc/src/main/java/com/splunk/sharedmc/event_loggers/AbstractEventLogger.java index 1bcea5c..16aef53 100644 --- a/shared-mc/src/main/java/com/splunk/sharedmc/event_loggers/AbstractEventLogger.java +++ b/shared-mc/src/main/java/com/splunk/sharedmc/event_loggers/AbstractEventLogger.java @@ -19,6 +19,19 @@ public class AbstractEventLogger { public static final String SPLUNK_PORT = "splunk.craft.connection.port"; public static final String SPLUNK_TOKEN = "splunk.craft.token"; + /** + * Opt-in toggles for the extended logging categories. All default to {@code false} in + * config so existing deployments don't see new event volume until explicitly enabled. + */ + public static final String ENABLE_COMBAT = "splunk.craft.enable.combat"; + public static final String ENABLE_ITEM = "splunk.craft.enable.item"; + public static final String ENABLE_PROGRESSION = "splunk.craft.enable.progression"; + public static final String ENABLE_SESSION_DETAIL = "splunk.craft.enable.session_detail"; + public static final String ENABLE_SERVER = "splunk.craft.enable.server"; + public static final String ENABLE_PERFORMANCE = "splunk.craft.enable.performance"; + public static final String ENABLE_SESSION_IP = "splunk.craft.enable.session_ip"; + public static final String PERFORMANCE_INTERVAL_TICKS = "splunk.craft.performance.interval_ticks"; + protected static final Logger logger = LogManager.getLogger(LOGGER_NAME); private static SingleSplunkConnection connection; @@ -31,7 +44,10 @@ public class AbstractEventLogger { private static int port; private static String token; + protected final Properties props; + public AbstractEventLogger(Properties properties) { + this.props = properties; // brittle way to do this if (connection == null) { logEventsToConsole = Boolean.valueOf(properties.getProperty(LOG_EVENTS_TO_CONSOLE_PROP_KEY, "true")); @@ -59,4 +75,24 @@ protected void logAndSend(LoggableEvent loggable) { } connection.sendToSplunk(loggable.toJson()); } + + /** + * Reads a boolean toggle from the plugin's {@link Properties}, loaded once at startup + * (no hot-reload); default false keeps high-volume categories opt-in. + */ + protected boolean isEnabled(String key) { + return Boolean.parseBoolean(props.getProperty(key, "false")); + } + + /** + * Reads an integer config value from the plugin's {@link Properties}, loaded once at + * startup (no hot-reload); falls back to {@code defaultValue} if missing or unparseable. + */ + protected int intProp(String key, int defaultValue) { + try { + return Integer.parseInt(props.getProperty(key, Integer.toString(defaultValue))); + } catch (NumberFormatException e) { + return defaultValue; + } + } } diff --git a/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/AbstractLoggableEvent.java b/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/AbstractLoggableEvent.java index 56a93d5..a5507cb 100644 --- a/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/AbstractLoggableEvent.java +++ b/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/AbstractLoggableEvent.java @@ -16,23 +16,31 @@ public class AbstractLoggableEvent extends SplunkCimLogEvent implements Loggable public static final String ACTION = "action"; /** - * Constructor. Enforces that subclasses must have a loggable event type. + * Constructor. Enforces that subclasses must have a loggable event type. Null-checks + * {@code coordinates} before dereferencing it (fixes a prior NPE risk when an event has + * no location, e.g. server lifecycle events) and delegates to the 3-arg constructor. * * @param type The type of event that this is. */ public AbstractLoggableEvent(LoggableEventType type, long worldTime, String worldName, Point3dLong coordinates) { + this(type, worldTime, worldName); + if (coordinates != null) { + this.addField("xCoord", coordinates.xCoord); + this.addField("yCoord", coordinates.yCoord); + this.addField("zCoord", coordinates.zCoord); + } + } + + /** + * Constructor for events with no world location (e.g. server lifecycle, performance). + */ + public AbstractLoggableEvent(LoggableEventType type, long worldTime, String worldName) { super(type.getEventName(), ""); - this.addField("time", System.currentTimeMillis()); - - this.addField("game_time", worldTime); - if(worldName != null) { + if (worldName != null) { this.addField("world", worldName); } - this.addField("xCoord", coordinates.xCoord); - this.addField("yCoord", coordinates.yCoord); - this.addField("zCoord", coordinates.zCoord); } @Override diff --git a/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggableCombatEvent.java b/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggableCombatEvent.java new file mode 100644 index 0000000..dc19c70 --- /dev/null +++ b/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggableCombatEvent.java @@ -0,0 +1,61 @@ +package com.splunk.sharedmc.loggable_events; + +import com.splunk.sharedmc.Point3dLong; + +/** + * Combat and survival events: damage dealt/taken, kills, healing, hunger, respawn. + */ +public class LoggableCombatEvent extends AbstractLoggableEvent { + + /** + * Constructor. + * + * @param action The type of combat action this represents, e.g. 'damage' or 'kill'. + */ + public LoggableCombatEvent(CombatAction action, long gameTime, String worldName, Point3dLong location) { + super(LoggableEventType.COMBAT, gameTime, worldName, location); + this.addField(ACTION, action.asString()); + } + + public LoggableCombatEvent setVictim(String victim) { + this.addField("victim", victim); + return this; + } + + public LoggableCombatEvent setSource(String source) { + this.addField("source", source); + return this; + } + + public LoggableCombatEvent setAmount(double amount) { + this.addField("amount", amount); + return this; + } + + public LoggableCombatEvent setCause(String cause) { + this.addField(CAUSE, cause); + return this; + } + + public LoggableCombatEvent setFoodLevel(int foodLevel) { + this.addField("food_level", foodLevel); + return this; + } + + public LoggableCombatEvent setHealthRemaining(double health) { + this.addField("health_remaining", health); + return this; + } + + public enum CombatAction { + DAMAGE("damage"), + KILL("kill"), + HEAL("heal"), + HUNGER("hunger"), + RESPAWN("respawn"); + + private final String action; + CombatAction(String action) { this.action = action; } + public String asString() { return action; } + } +} diff --git a/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggableEventType.java b/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggableEventType.java index 3e2382d..7587242 100644 --- a/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggableEventType.java +++ b/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggableEventType.java @@ -1,12 +1,19 @@ package com.splunk.sharedmc.loggable_events; /** - * Categories of loggable events. + * Categories of loggable events. Includes the extended logging categories SERVER, + * PERFORMANCE, COMBAT, ITEM, and PROGRESSION added alongside the original PLAYER, BLOCK, + * and DEATH categories. */ public enum LoggableEventType { PLAYER("PlayerEvent"), BLOCK("BlockEvent"), - DEATH("DeathEvent"); + DEATH("DeathEvent"), + SERVER("ServerEvent"), + PERFORMANCE("PerformanceEvent"), + COMBAT("CombatEvent"), + ITEM("ItemEvent"), + PROGRESSION("ProgressionEvent"); private final String eventName; diff --git a/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggableItemEvent.java b/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggableItemEvent.java new file mode 100644 index 0000000..4f9e44f --- /dev/null +++ b/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggableItemEvent.java @@ -0,0 +1,43 @@ +package com.splunk.sharedmc.loggable_events; + +import com.splunk.sharedmc.Point3dLong; + +/** + * Item economy events: pickup and drop. + */ +public class LoggableItemEvent extends AbstractLoggableEvent { + + /** + * Constructor. + * + * @param action The type of item action this represents, e.g. 'pickup' or 'drop'. + */ + public LoggableItemEvent(ItemAction action, long gameTime, String worldName, Point3dLong location) { + super(LoggableEventType.ITEM, gameTime, worldName, location); + this.addField(ACTION, action.asString()); + } + + public LoggableItemEvent setPlayerName(String playerName) { + this.addField(PLAYER_NAME, playerName); + return this; + } + + public LoggableItemEvent setItem(String item) { + this.addField("item", item); + return this; + } + + public LoggableItemEvent setQuantity(int quantity) { + this.addField("quantity", quantity); + return this; + } + + public enum ItemAction { + PICKUP("pickup"), + DROP("drop"); + + private final String action; + ItemAction(String action) { this.action = action; } + public String asString() { return action; } + } +} diff --git a/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggablePerformanceEvent.java b/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggablePerformanceEvent.java new file mode 100644 index 0000000..f9ee0ca --- /dev/null +++ b/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggablePerformanceEvent.java @@ -0,0 +1,47 @@ +package com.splunk.sharedmc.loggable_events; + +/** + * A sampled snapshot of server performance metrics. Unlike the other LoggableEvent types, + * this is produced periodically by {@code ScheduledMetricLogger} polling rather than in + * response to a Bukkit event. + */ +public class LoggablePerformanceEvent extends AbstractLoggableEvent { + + /** + * Constructor. + * + * @param gameTime The in-game time at which this sample was taken. + */ + public LoggablePerformanceEvent(long gameTime) { + super(LoggableEventType.PERFORMANCE, gameTime, null); + this.addField(ACTION, "performance_sample"); + } + + /** + * Unused on vanilla spigot-api — {@code Bukkit.getTPS()} is a Paper-only API; retained + * for when/if the project switches to paper-api. + */ + public LoggablePerformanceEvent setTps(double tps) { + this.addField("tps", tps); + return this; + } + + /** + * Unused on vanilla spigot-api — {@code Bukkit.getAverageTickTime()} is a Paper-only + * API; retained for when/if the project switches to paper-api. + */ + public LoggablePerformanceEvent setMspt(double mspt) { + this.addField("mspt", mspt); + return this; + } + + public LoggablePerformanceEvent setOnlinePlayers(int count) { + this.addField("online_players", count); + return this; + } + + public LoggablePerformanceEvent setLoadedChunks(int chunks) { + this.addField("loaded_chunks", chunks); + return this; + } +} diff --git a/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggablePlayerEvent.java b/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggablePlayerEvent.java index 92112a6..3230f96 100644 --- a/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggablePlayerEvent.java +++ b/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggablePlayerEvent.java @@ -51,7 +51,40 @@ public LoggablePlayerEvent setFrom(Point3dLong from) { this.addField("from_x", from.xCoord); this.addField("from_y", from.yCoord); this.addField("from_z", from.zCoord); - + + return this; + } + + /** + * Sets the player's unique id, captured on connect to disambiguate players across + * name changes. + */ + public LoggablePlayerEvent setPlayerUuid(String uuid) { + this.addField("uuid", uuid); + return this; + } + + /** + * Sets the player's client IP. The project explicitly treats this as non-PII data; + * it is only logged when {@code splunk.craft.enable.session_ip=true}. + */ + public LoggablePlayerEvent setPlayerIp(String ip) { + this.addField("client_ip", ip); + return this; + } + + /** + * Currently unused — {@code Player.getProtocolVersion()} is a Paper-only API and is + * not available on vanilla spigot-api. + */ + public LoggablePlayerEvent setProtocolVersion(int protocol) { + this.addField("protocol_version", protocol); + return this; + } + + /** Sets the player's new game mode, e.g. for a gamemode-change event. */ + public LoggablePlayerEvent setGamemode(String gamemode) { + this.addField("gamemode", gamemode); return this; } @@ -62,7 +95,16 @@ public enum PlayerEventAction { PLAYER_CONNECT("player_connect"), PLAYER_DISCONNECT("player_disconnect"), CHAT("chat"), - LOCATION("move"); + LOCATION("move"), + /** Player teleported, e.g. via command, plugin, or end/nether portal. */ + TELEPORT("teleport"), + /** Player switched game mode, e.g. survival to creative. */ + GAMEMODE_CHANGE("gamemode_change"), + /** Player entered a bed. */ + BED_ENTER("bed_enter"), + /** Player changed worlds, e.g. via portal or teleport command. */ + WORLD_CHANGE("world_change"), + ADVANCEMENT("advancement"); /** * The name of the action. diff --git a/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggableProgressionEvent.java b/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggableProgressionEvent.java new file mode 100644 index 0000000..1a94bd2 --- /dev/null +++ b/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggableProgressionEvent.java @@ -0,0 +1,51 @@ +package com.splunk.sharedmc.loggable_events; + +/** + * Player progression and activity: XP, level, enchant, craft, fish, command. + */ +public class LoggableProgressionEvent extends AbstractLoggableEvent { + + /** + * Constructor. + * + * @param action The type of progression action this represents, e.g. 'level_change'. + */ + public LoggableProgressionEvent(ProgressionAction action, long gameTime, String worldName) { + super(LoggableEventType.PROGRESSION, gameTime, worldName); + this.addField(ACTION, action.asString()); + } + + public LoggableProgressionEvent setPlayerName(String playerName) { + this.addField(PLAYER_NAME, playerName); + return this; + } + + public LoggableProgressionEvent setNewLevel(int level) { + this.addField("new_level", level); + return this; + } + + public LoggableProgressionEvent setExpAmount(int exp) { + this.addField("exp_amount", exp); + return this; + } + + /** Free-form detail: command text, enchant name, crafted item, fish caught. */ + public LoggableProgressionEvent setDetail(String detail) { + this.addField("detail", detail); + return this; + } + + public enum ProgressionAction { + EXP_CHANGE("exp_change"), + LEVEL_CHANGE("level_change"), + ENCHANT("enchant"), + CRAFT("craft"), + FISH("fish"), + COMMAND("command"); + + private final String action; + ProgressionAction(String action) { this.action = action; } + public String asString() { return action; } + } +} diff --git a/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggableServerEvent.java b/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggableServerEvent.java new file mode 100644 index 0000000..c411365 --- /dev/null +++ b/shared-mc/src/main/java/com/splunk/sharedmc/loggable_events/LoggableServerEvent.java @@ -0,0 +1,37 @@ +package com.splunk.sharedmc.loggable_events; + +/** + * Server lifecycle and world-state events (start, stop, weather). + */ +public class LoggableServerEvent extends AbstractLoggableEvent { + + /** + * Constructor. + * + * @param action The type of server action this represents, e.g. 'server_start'. + */ + public LoggableServerEvent(ServerAction action, long gameTime, String worldName) { + super(LoggableEventType.SERVER, gameTime, worldName); + this.addField(ACTION, action.asString()); + } + + public LoggableServerEvent setWeather(String weather) { + this.addField("weather", weather); + return this; + } + + public LoggableServerEvent setMotd(String motd) { + this.addField("motd", motd); + return this; + } + + public enum ServerAction { + SERVER_START("server_start"), + SERVER_STOP("server_stop"), + WEATHER_CHANGE("weather_change"); + + private final String action; + ServerAction(String action) { this.action = action; } + public String asString() { return action; } + } +} diff --git a/shared-mc/src/main/java/com/splunk/sharedmc/util/EventThrottle.java b/shared-mc/src/main/java/com/splunk/sharedmc/util/EventThrottle.java new file mode 100644 index 0000000..6e0ff58 --- /dev/null +++ b/shared-mc/src/main/java/com/splunk/sharedmc/util/EventThrottle.java @@ -0,0 +1,63 @@ +package com.splunk.sharedmc.util; + +import java.util.concurrent.TimeUnit; +import java.util.function.LongSupplier; + +import com.google.common.cache.Cache; +import com.google.common.cache.CacheBuilder; + +/** + * Per-key time-window throttle, backed by a guava {@link Cache}. Used to prevent flooding + * Splunk with high-frequency events (e.g. damage, food level changes, item pickups). + * {@link #allow(String)} returns true at most once per window per key. Backed by a + * size-bounded guava cache so it is safe for many players. + */ +public class EventThrottle { + + private static final int MAX_KEYS = 1024; + + private final long windowMillis; + private final LongSupplier clock; + private final Cache lastAllowed; + + /** + * Constructor using the real system clock. + * + * @param windowMillis Minimum time, in milliseconds, between two allowed calls for the + * same key. + */ + public EventThrottle(long windowMillis) { + this(windowMillis, System::currentTimeMillis); + } + + /** + * Testable constructor with an injectable clock. The {@code clock} param exists so the + * throttle can be unit-tested without depending on real wall-clock time. + * + * @param windowMillis Minimum time, in milliseconds, between two allowed calls for the + * same key. + * @param clock Supplies the current time; injected so tests can control elapsed time. + */ + public EventThrottle(long windowMillis, LongSupplier clock) { + this.windowMillis = windowMillis; + this.clock = clock; + this.lastAllowed = CacheBuilder.newBuilder() + .maximumSize(MAX_KEYS) + .expireAfterAccess(windowMillis * 4, TimeUnit.MILLISECONDS) + .build(); + } + + /** + * @return true if an event for {@code key} should be sent now (first call, or the + * window since the last allowed call has elapsed); false to drop it. + */ + public synchronized boolean allow(String key) { + long now = clock.getAsLong(); + Long last = lastAllowed.getIfPresent(key); + if (last == null || (now - last) >= windowMillis) { + lastAllowed.put(key, now); + return true; + } + return false; + } +} diff --git a/shared-mc/src/test/java/com/splunk/sharedmc/SingleSplunkConnectionTest.java b/shared-mc/src/test/java/com/splunk/sharedmc/SingleSplunkConnectionTest.java new file mode 100644 index 0000000..8fe1cc0 --- /dev/null +++ b/shared-mc/src/test/java/com/splunk/sharedmc/SingleSplunkConnectionTest.java @@ -0,0 +1,26 @@ +package com.splunk.sharedmc; + +import static org.junit.Assert.assertEquals; +import static org.junit.Assert.assertTrue; + +import com.google.gson.JsonObject; +import com.google.gson.JsonParser; +import org.junit.Test; + +public class SingleSplunkConnectionTest { + + @Test + public void buildHecEnvelope_wrapsMessageInEventField() { + String out = SingleSplunkConnection.buildHecEnvelope("hello world"); + JsonObject parsed = JsonParser.parseString(out).getAsJsonObject(); + assertEquals("hello world", parsed.get("event").getAsString()); + } + + @Test + public void buildHecEnvelope_escapesQuotes() { + String out = SingleSplunkConnection.buildHecEnvelope("a \"quoted\" value"); + JsonObject parsed = JsonParser.parseString(out).getAsJsonObject(); + assertEquals("a \"quoted\" value", parsed.get("event").getAsString()); + assertTrue(out.contains("\\\"")); + } +} diff --git a/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/AbstractLoggableEventTest.java b/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/AbstractLoggableEventTest.java new file mode 100644 index 0000000..532e475 --- /dev/null +++ b/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/AbstractLoggableEventTest.java @@ -0,0 +1,18 @@ +package com.splunk.sharedmc.loggable_events; + +import static org.junit.Assert.assertTrue; +import static org.junit.Assert.assertFalse; + +import org.junit.Test; + +public class AbstractLoggableEventTest { + + @Test + public void locationLessConstructor_doesNotNpe_andOmitsCoords() { + AbstractLoggableEvent e = + new AbstractLoggableEvent(LoggableEventType.SERVER, 0L, "world"); + String json = e.toJson(); + assertTrue(json.contains("SERVER".toLowerCase()) || json.contains("ServerEvent")); + assertFalse("location-less event must not emit xCoord", json.contains("xCoord")); + } +} diff --git a/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggableCombatEventTest.java b/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggableCombatEventTest.java new file mode 100644 index 0000000..41ad5b9 --- /dev/null +++ b/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggableCombatEventTest.java @@ -0,0 +1,30 @@ +package com.splunk.sharedmc.loggable_events; + +import static org.junit.Assert.assertTrue; +import com.splunk.sharedmc.Point3dLong; +import org.junit.Test; + +public class LoggableCombatEventTest { + @Test + public void damage_carriesAttackerVictimAndAmount() { + LoggableCombatEvent e = new LoggableCombatEvent( + LoggableCombatEvent.CombatAction.DAMAGE, 0L, "world", new Point3dLong(1, 2, 3)); + e.setVictim("Steve").setSource("Zombie").setAmount(4.5).setCause("ENTITY_ATTACK"); + String json = e.toJson(); + assertTrue(json.contains("victim")); + assertTrue(json.contains("Steve")); + assertTrue(json.contains("source")); + assertTrue(json.contains("4.5")); + assertTrue(json.contains("damage")); + } + + @Test + public void hunger_carriesFoodLevel() { + LoggableCombatEvent e = new LoggableCombatEvent( + LoggableCombatEvent.CombatAction.HUNGER, 0L, "world", null); + e.setVictim("Alex").setFoodLevel(7); + String json = e.toJson(); + assertTrue(json.contains("food_level")); + assertTrue(json.contains("hunger")); + } +} diff --git a/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggableItemEventTest.java b/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggableItemEventTest.java new file mode 100644 index 0000000..8e32437 --- /dev/null +++ b/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggableItemEventTest.java @@ -0,0 +1,18 @@ +package com.splunk.sharedmc.loggable_events; + +import static org.junit.Assert.assertTrue; +import com.splunk.sharedmc.Point3dLong; +import org.junit.Test; + +public class LoggableItemEventTest { + @Test + public void pickup_carriesItemAndQuantity() { + LoggableItemEvent e = new LoggableItemEvent( + LoggableItemEvent.ItemAction.PICKUP, 0L, "world", new Point3dLong(0, 64, 0)); + e.setPlayerName("Steve").setItem("DIAMOND").setQuantity(3); + String json = e.toJson(); + assertTrue(json.contains("pickup")); + assertTrue(json.contains("DIAMOND")); + assertTrue(json.contains("quantity")); + } +} diff --git a/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggablePerformanceEventTest.java b/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggablePerformanceEventTest.java new file mode 100644 index 0000000..b8df58d --- /dev/null +++ b/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggablePerformanceEventTest.java @@ -0,0 +1,17 @@ +package com.splunk.sharedmc.loggable_events; + +import static org.junit.Assert.assertTrue; +import org.junit.Test; + +public class LoggablePerformanceEventTest { + @Test + public void sample_serializesMetrics() { + LoggablePerformanceEvent e = new LoggablePerformanceEvent(0L); + e.setTps(19.8).setMspt(8.4).setOnlinePlayers(12).setLoadedChunks(1500); + String json = e.toJson(); + assertTrue(json.contains("tps")); + assertTrue(json.contains("19.8")); + assertTrue(json.contains("mspt")); + assertTrue(json.contains("online_players")); + } +} diff --git a/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggablePlayerEventTest.java b/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggablePlayerEventTest.java new file mode 100644 index 0000000..65162d2 --- /dev/null +++ b/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggablePlayerEventTest.java @@ -0,0 +1,31 @@ +package com.splunk.sharedmc.loggable_events; + +import static org.junit.Assert.assertTrue; +import com.splunk.sharedmc.Point3dLong; +import org.junit.Test; + +public class LoggablePlayerEventTest { + @Test + public void connect_carriesSessionDetail() { + LoggablePlayerEvent e = new LoggablePlayerEvent( + LoggablePlayerEvent.PlayerEventAction.PLAYER_CONNECT, 0L, "world", new Point3dLong(0, 64, 0)); + e.setPlayerName("Steve") + .setPlayerUuid("11111111-2222-3333-4444-555555555555") + .setPlayerIp("203.0.113.7") + .setProtocolVersion(767); + String json = e.toJson(); + assertTrue(json.contains("uuid")); + assertTrue(json.contains("203.0.113.7")); + assertTrue(json.contains("protocol_version")); + } + + @Test + public void gamemodeChange_serializesAction() { + LoggablePlayerEvent e = new LoggablePlayerEvent( + LoggablePlayerEvent.PlayerEventAction.GAMEMODE_CHANGE, 0L, "world", new Point3dLong(0, 64, 0)); + e.setGamemode("CREATIVE"); + String json = e.toJson(); + assertTrue(json.contains("gamemode_change")); + assertTrue(json.contains("CREATIVE")); + } +} diff --git a/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggableProgressionEventTest.java b/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggableProgressionEventTest.java new file mode 100644 index 0000000..31475ec --- /dev/null +++ b/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggableProgressionEventTest.java @@ -0,0 +1,27 @@ +package com.splunk.sharedmc.loggable_events; + +import static org.junit.Assert.assertTrue; +import org.junit.Test; + +public class LoggableProgressionEventTest { + @Test + public void levelUp_carriesNewLevel() { + LoggableProgressionEvent e = new LoggableProgressionEvent( + LoggableProgressionEvent.ProgressionAction.LEVEL_CHANGE, 0L, "world"); + e.setPlayerName("Alex").setNewLevel(30); + String json = e.toJson(); + assertTrue(json.contains("level_change")); + assertTrue(json.contains("new_level")); + assertTrue(json.contains("30")); + } + + @Test + public void command_carriesCommandText() { + LoggableProgressionEvent e = new LoggableProgressionEvent( + LoggableProgressionEvent.ProgressionAction.COMMAND, 0L, "world"); + e.setPlayerName("Alex").setDetail("/gamemode creative"); + String json = e.toJson(); + assertTrue(json.contains("command")); + assertTrue(json.contains("gamemode creative")); + } +} diff --git a/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggableServerEventTest.java b/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggableServerEventTest.java new file mode 100644 index 0000000..f3b973e --- /dev/null +++ b/shared-mc/src/test/java/com/splunk/sharedmc/loggable_events/LoggableServerEventTest.java @@ -0,0 +1,24 @@ +package com.splunk.sharedmc.loggable_events; + +import static org.junit.Assert.assertTrue; +import org.junit.Test; + +public class LoggableServerEventTest { + @Test + public void serverStart_serializesAction() { + LoggableServerEvent e = new LoggableServerEvent( + LoggableServerEvent.ServerAction.SERVER_START, 0L, null); + String json = e.toJson(); + assertTrue(json.contains("server_start")); + } + + @Test + public void weatherChange_carriesState() { + LoggableServerEvent e = new LoggableServerEvent( + LoggableServerEvent.ServerAction.WEATHER_CHANGE, 1000L, "world"); + e.setWeather("storm"); + String json = e.toJson(); + assertTrue(json.contains("weather")); + assertTrue(json.contains("storm")); + } +} diff --git a/shared-mc/src/test/java/com/splunk/sharedmc/util/EventThrottleTest.java b/shared-mc/src/test/java/com/splunk/sharedmc/util/EventThrottleTest.java new file mode 100644 index 0000000..4ebe425 --- /dev/null +++ b/shared-mc/src/test/java/com/splunk/sharedmc/util/EventThrottleTest.java @@ -0,0 +1,27 @@ +package com.splunk.sharedmc.util; + +import static org.junit.Assert.assertTrue; +import static org.junit.Assert.assertFalse; +import org.junit.Test; + +public class EventThrottleTest { + @Test + public void firstEventForKeyPasses_secondWithinWindowBlocked() { + long[] now = {1_000L}; + EventThrottle throttle = new EventThrottle(1000L, () -> now[0]); + + assertTrue("first event passes", throttle.allow("Steve")); + now[0] = 1_500L; // 500ms later, inside window + assertFalse("second event inside window blocked", throttle.allow("Steve")); + now[0] = 2_100L; // 1100ms after first, outside window + assertTrue("event after window passes", throttle.allow("Steve")); + } + + @Test + public void differentKeysAreIndependent() { + long[] now = {0L}; + EventThrottle throttle = new EventThrottle(1000L, () -> now[0]); + assertTrue(throttle.allow("Steve")); + assertTrue(throttle.allow("Alex")); + } +} diff --git a/spigot/pom.xml b/spigot/pom.xml index 451e073..e4db243 100644 --- a/spigot/pom.xml +++ b/spigot/pom.xml @@ -10,44 +10,121 @@ spigot - - - spigot-repo - https://hub.spigotmc.org/nexus/content/repositories/snapshots/ - - + + + 1.21.1 + spigot + 1.21.1-R0.1 + 1.21.1-R0.1-SNAPSHOT + + + + + mc-1201 + + 1.20.1 + 1.20.1-R0.1 + 1.20.1-R0.1-SNAPSHOT + + + + mc-1204 + + 1.20.4 + 1.20.4-R0.1 + 1.20.4-R0.1-SNAPSHOT + + + + mc-1206 + + 1.20.6 + 1.20.6-R0.1 + 1.20.6-R0.1-SNAPSHOT + + + + + + org.spigotmc + spigot-api + ${spigot.api.version} + provided + net.md-5 bungeecord-chat 1.21-R0.4 + provided - - - org.spigotmc - spigot-api - 26.2-R0.1-20260616.212206-1 - - - - org.bukkit - bukkit - 26.2-R0.1-SNAPSHOT - + + com.github.cryptomorin XSeries 13.5.1 - + + + org.apache.logging.log4j + log4j-api + - + com.splunk shared-mc ${project.version} + + + + + + org.apache.maven.plugins + maven-shade-plugin + 3.6.0 + + logtosplunk-${mc.version}-${loader.name}-${loader.version.display} + false + + + *:* + + META-INF/versions/*/module-info.class + META-INF/*.SF + META-INF/*.DSA + META-INF/*.RSA + + + + + + + package + + shade + + + + + + diff --git a/spigot/src/main/java/com/splunk/spigot/LogToSplunkPlugin.java b/spigot/src/main/java/com/splunk/spigot/LogToSplunkPlugin.java index 1aecb1f..ab08344 100644 --- a/spigot/src/main/java/com/splunk/spigot/LogToSplunkPlugin.java +++ b/spigot/src/main/java/com/splunk/spigot/LogToSplunkPlugin.java @@ -47,6 +47,31 @@ public void onEnable() { getServer().getPluginManager().registerEvents(new DeathEventLogger(properties), this); getServer().getPluginManager().registerEvents(new PlayerEventLogger(properties), this); + final org.bukkit.plugin.PluginManager pm = getServer().getPluginManager(); + final java.util.Properties p = properties; + + // Each extended logging category is opt-in: only register its listener/sampler if + // the corresponding splunk.craft.enable.* toggle is set to true in config. + if (Boolean.parseBoolean(p.getProperty("splunk.craft.enable.combat", "false"))) { + pm.registerEvents(new com.splunk.spigot.eventloggers.CombatEventLogger(p), this); + } + if (Boolean.parseBoolean(p.getProperty("splunk.craft.enable.item", "false"))) { + pm.registerEvents(new com.splunk.spigot.eventloggers.ItemEventLogger(p), this); + } + if (Boolean.parseBoolean(p.getProperty("splunk.craft.enable.progression", "false"))) { + pm.registerEvents(new com.splunk.spigot.eventloggers.ProgressionEventLogger(p), this); + } + if (Boolean.parseBoolean(p.getProperty("splunk.craft.enable.server", "false"))) { + pm.registerEvents(new com.splunk.spigot.eventloggers.ServerEventLogger(p), this); + } + if (Boolean.parseBoolean(p.getProperty("splunk.craft.enable.performance", "false"))) { + int interval = 600; + try { + interval = Integer.parseInt(p.getProperty("splunk.craft.performance.interval_ticks", "600")); + } catch (NumberFormatException ignored) { } + new com.splunk.spigot.eventloggers.PerformanceSampler(p).start(this, interval); + } + logAndSend("Splunk for Minecraft initialized."); } diff --git a/spigot/src/main/java/com/splunk/spigot/eventloggers/CombatEventLogger.java b/spigot/src/main/java/com/splunk/spigot/eventloggers/CombatEventLogger.java new file mode 100644 index 0000000..57ef3bd --- /dev/null +++ b/spigot/src/main/java/com/splunk/spigot/eventloggers/CombatEventLogger.java @@ -0,0 +1,104 @@ +package com.splunk.spigot.eventloggers; + +import static com.splunk.spigot.LogToSplunkPlugin.locationAsPoint; + +import java.util.Properties; + +import org.bukkit.entity.Player; +import org.bukkit.event.EventHandler; +import org.bukkit.event.Listener; +import org.bukkit.event.entity.EntityDamageByEntityEvent; +import org.bukkit.event.entity.EntityRegainHealthEvent; +import org.bukkit.event.entity.FoodLevelChangeEvent; +import org.bukkit.event.player.PlayerRespawnEvent; + +import com.splunk.sharedmc.event_loggers.AbstractEventLogger; +import com.splunk.sharedmc.loggable_events.LoggableCombatEvent; +import com.splunk.sharedmc.loggable_events.LoggableCombatEvent.CombatAction; +import com.splunk.sharedmc.util.EventThrottle; + +/** + * Logs combat and survival events. High-frequency events (damage, hunger) are throttled + * per-player. + * + *

Note: there is intentionally no {@code onDeath}/{@code EntityDeathEvent} handler here. + * Kill events are still handled by the pre-existing {@code DeathEventLogger} to avoid + * double-logging the same kill as both a CombatEvent and a DeathEvent. + */ +public class CombatEventLogger extends AbstractEventLogger implements Listener { + + private static final long THROTTLE_MS = 1000L; + private final EventThrottle throttle = new EventThrottle(THROTTLE_MS); + + public CombatEventLogger(Properties props) { + super(props); + } + + /** Throttled per-victim: damage events can fire many times per second. */ + @EventHandler + public void onDamage(EntityDamageByEntityEvent event) { + if (!(event.getEntity() instanceof Player)) { + return; + } + Player victim = (Player) event.getEntity(); + if (!throttle.allow("dmg:" + victim.getName())) { + return; + } + LoggableCombatEvent loggable = new LoggableCombatEvent( + CombatAction.DAMAGE, victim.getWorld().getTime(), victim.getWorld().getName(), + locationAsPoint(victim.getLocation())); + loggable.setVictim(victim.getName()) + .setSource(event.getDamager().getType().toString()) + .setAmount(event.getFinalDamage()) + .setCause(event.getCause().toString()) + .setHealthRemaining(victim.getHealth()); + logAndSend(loggable); + } + + /** Throttled per-player: regen-based healing (e.g. saturation) can fire frequently. */ + @EventHandler + public void onRegainHealth(EntityRegainHealthEvent event) { + if (!(event.getEntity() instanceof Player)) { + return; + } + Player player = (Player) event.getEntity(); + if (!throttle.allow("heal:" + player.getName())) { + return; + } + LoggableCombatEvent loggable = new LoggableCombatEvent( + CombatAction.HEAL, player.getWorld().getTime(), player.getWorld().getName(), + locationAsPoint(player.getLocation())); + loggable.setVictim(player.getName()) + .setAmount(event.getAmount()) + .setCause(event.getRegainReason().toString()) + .setHealthRemaining(player.getHealth()); + logAndSend(loggable); + } + + /** Throttled per-player: food level changes frequently while eating, sprinting, etc. */ + @EventHandler + public void onFoodLevelChange(FoodLevelChangeEvent event) { + if (!(event.getEntity() instanceof Player)) { + return; + } + Player player = (Player) event.getEntity(); + if (!throttle.allow("food:" + player.getName())) { + return; + } + LoggableCombatEvent loggable = new LoggableCombatEvent( + CombatAction.HUNGER, player.getWorld().getTime(), player.getWorld().getName(), + locationAsPoint(player.getLocation())); + loggable.setVictim(player.getName()).setFoodLevel(event.getFoodLevel()); + logAndSend(loggable); + } + + /** Not throttled: respawn is a rare, deliberate-trigger event for a given player. */ + @EventHandler + public void onRespawn(PlayerRespawnEvent event) { + LoggableCombatEvent loggable = new LoggableCombatEvent( + CombatAction.RESPAWN, event.getPlayer().getWorld().getTime(), + event.getPlayer().getWorld().getName(), locationAsPoint(event.getRespawnLocation())); + loggable.setVictim(event.getPlayer().getName()); + logAndSend(loggable); + } +} diff --git a/spigot/src/main/java/com/splunk/spigot/eventloggers/ItemEventLogger.java b/spigot/src/main/java/com/splunk/spigot/eventloggers/ItemEventLogger.java new file mode 100644 index 0000000..60c13f5 --- /dev/null +++ b/spigot/src/main/java/com/splunk/spigot/eventloggers/ItemEventLogger.java @@ -0,0 +1,60 @@ +package com.splunk.spigot.eventloggers; + +import static com.splunk.spigot.LogToSplunkPlugin.locationAsPoint; + +import java.util.Properties; + +import org.bukkit.entity.Player; +import org.bukkit.event.EventHandler; +import org.bukkit.event.Listener; +import org.bukkit.event.entity.EntityPickupItemEvent; +import org.bukkit.event.player.PlayerDropItemEvent; + +import com.splunk.sharedmc.event_loggers.AbstractEventLogger; +import com.splunk.sharedmc.loggable_events.LoggableItemEvent; +import com.splunk.sharedmc.loggable_events.LoggableItemEvent.ItemAction; +import com.splunk.sharedmc.util.EventThrottle; + +/** + * Logs item pickup and drop events. Pickup is throttled (it can fire rapidly, e.g. when + * picking up XP orbs or arrows); drop is not throttled since it is a deliberate, low + * frequency player action. + */ +public class ItemEventLogger extends AbstractEventLogger implements Listener { + + private final EventThrottle throttle = new EventThrottle(1000L); + + public ItemEventLogger(Properties props) { + super(props); + } + + @EventHandler + public void onPickup(EntityPickupItemEvent event) { + if (!(event.getEntity() instanceof Player)) { + return; + } + Player player = (Player) event.getEntity(); + if (!throttle.allow("pickup:" + player.getName())) { + return; + } + LoggableItemEvent loggable = new LoggableItemEvent( + ItemAction.PICKUP, player.getWorld().getTime(), player.getWorld().getName(), + locationAsPoint(player.getLocation())); + loggable.setPlayerName(player.getName()) + .setItem(event.getItem().getItemStack().getType().toString()) + .setQuantity(event.getItem().getItemStack().getAmount()); + logAndSend(loggable); + } + + @EventHandler + public void onDrop(PlayerDropItemEvent event) { + Player player = event.getPlayer(); + LoggableItemEvent loggable = new LoggableItemEvent( + ItemAction.DROP, player.getWorld().getTime(), player.getWorld().getName(), + locationAsPoint(player.getLocation())); + loggable.setPlayerName(player.getName()) + .setItem(event.getItemDrop().getItemStack().getType().toString()) + .setQuantity(event.getItemDrop().getItemStack().getAmount()); + logAndSend(loggable); + } +} diff --git a/spigot/src/main/java/com/splunk/spigot/eventloggers/PerformanceSampler.java b/spigot/src/main/java/com/splunk/spigot/eventloggers/PerformanceSampler.java new file mode 100644 index 0000000..dd369d8 --- /dev/null +++ b/spigot/src/main/java/com/splunk/spigot/eventloggers/PerformanceSampler.java @@ -0,0 +1,38 @@ +package com.splunk.spigot.eventloggers; + +import java.util.Properties; + +import org.bukkit.Bukkit; + +import com.splunk.sharedmc.loggable_events.LoggablePerformanceEvent; +import com.splunk.spigot.scheduling.ScheduledMetricLogger; + +/** + * Periodically samples server performance (online players, loaded chunks). Extends + * {@link ScheduledMetricLogger}, so this is polling-based rather than event-driven. + * + *

NOTE: {@code Bukkit.getTPS()} and {@code Bukkit.getAverageTickTime()} are + * Paper-only APIs and are not present on vanilla spigot-api (verified via + * {@code javap} against spigot-api 1.21.10 — no {@code getTPS}/{@code AverageTickTime} + * symbols found on {@code org.bukkit.Bukkit}). TPS/MSPT sampling is therefore omitted; + * only online_players and loaded_chunks, which are available on the Bukkit API, are + * sampled here. + */ +public class PerformanceSampler extends ScheduledMetricLogger { + + public PerformanceSampler(Properties props) { + super(props); + } + + @Override + protected void sample() { + LoggablePerformanceEvent e = new LoggablePerformanceEvent(0L); + e.setOnlinePlayers(Bukkit.getOnlinePlayers().size()); + int loaded = 0; + for (org.bukkit.World w : Bukkit.getWorlds()) { + loaded += w.getLoadedChunks().length; + } + e.setLoadedChunks(loaded); + logAndSend(e); + } +} diff --git a/spigot/src/main/java/com/splunk/spigot/eventloggers/PlayerEventLogger.java b/spigot/src/main/java/com/splunk/spigot/eventloggers/PlayerEventLogger.java index c68e170..bf75d26 100644 --- a/spigot/src/main/java/com/splunk/spigot/eventloggers/PlayerEventLogger.java +++ b/spigot/src/main/java/com/splunk/spigot/eventloggers/PlayerEventLogger.java @@ -13,6 +13,12 @@ import org.bukkit.event.player.PlayerLoginEvent; import org.bukkit.event.player.PlayerMoveEvent; import org.bukkit.event.player.PlayerQuitEvent; +import org.bukkit.event.player.AsyncPlayerChatEvent; +import org.bukkit.event.player.PlayerAdvancementDoneEvent; +import org.bukkit.event.player.PlayerTeleportEvent; +import org.bukkit.event.player.PlayerGameModeChangeEvent; +import org.bukkit.event.player.PlayerBedEnterEvent; +import org.bukkit.event.player.PlayerChangedWorldEvent; import com.google.common.cache.Cache; import com.google.common.cache.CacheBuilder; @@ -57,8 +63,13 @@ public PlayerEventLogger(Properties props) { */ @EventHandler public void onPlayerConnect(PlayerLoginEvent event) { - logAndSend( - generateLoggablePlayerEvent(event, PlayerEventAction.PLAYER_CONNECT, null, event.getKickMessage())); + LoggablePlayerEvent loggable = + generateLoggablePlayerEvent(event, PlayerEventAction.PLAYER_CONNECT, null, event.getKickMessage()); + loggable.setPlayerUuid(event.getPlayer().getUniqueId().toString()); + if (isEnabled(ENABLE_SESSION_IP) && event.getAddress() != null) { + loggable.setPlayerIp(event.getAddress().getHostAddress()); + } + logAndSend(loggable); } /** @@ -119,4 +130,98 @@ private LoggablePlayerEvent generateLoggablePlayerEvent( return loggable; } + + /** + * Logs player chat messages to Splunk. + * + * @param event The captured event. + */ + @EventHandler + public void onPlayerChat(AsyncPlayerChatEvent event) { + logAndSend( + generateLoggablePlayerEvent(event, PlayerEventAction.CHAT, null, event.getMessage())); + } + + /** + * Logs player advancement unlocks to Splunk. + * + * @param event The captured event. + */ + @EventHandler + public void onPlayerAdvancementDone(PlayerAdvancementDoneEvent event) { + // We only want to log real achievements/advancements, not recipe unlocks. + String key = event.getAdvancement().getKey().toString(); + if (key.startsWith("minecraft:recipes/")) { + return; + } + logAndSend( + generateLoggablePlayerEvent(event, PlayerEventAction.ADVANCEMENT, null, key)); + } + + /** + * Logs player teleports to Splunk. Returns early via the + * {@code isEnabled(ENABLE_SESSION_DETAIL)} guard — this category is opt-in. + * + * @param event The captured event. + */ + @EventHandler + public void onTeleport(PlayerTeleportEvent event) { + if (!isEnabled(ENABLE_SESSION_DETAIL)) { + return; + } + LoggablePlayerEvent loggable = generateLoggablePlayerEvent( + event, PlayerEventAction.TELEPORT, event.getCause().toString(), null); + loggable.setFrom(locationAsPoint(event.getFrom())); + loggable.setTo(locationAsPoint(event.getTo())); + logAndSend(loggable); + } + + /** + * Logs player game mode changes to Splunk. Returns early via the + * {@code isEnabled(ENABLE_SESSION_DETAIL)} guard — this category is opt-in. + * + * @param event The captured event. + */ + @EventHandler + public void onGameModeChange(PlayerGameModeChangeEvent event) { + if (!isEnabled(ENABLE_SESSION_DETAIL)) { + return; + } + LoggablePlayerEvent loggable = generateLoggablePlayerEvent( + event, PlayerEventAction.GAMEMODE_CHANGE, null, null); + loggable.setGamemode(event.getNewGameMode().toString()); + logAndSend(loggable); + } + + /** + * Logs when a player enters a bed. Returns early via the + * {@code isEnabled(ENABLE_SESSION_DETAIL)} guard — this category is opt-in. + * + * @param event The captured event. + */ + @EventHandler + public void onBedEnter(PlayerBedEnterEvent event) { + if (!isEnabled(ENABLE_SESSION_DETAIL)) { + return; + } + LoggablePlayerEvent loggable = generateLoggablePlayerEvent( + event, PlayerEventAction.BED_ENTER, null, null); + logAndSend(loggable); + } + + /** + * Logs when a player changes worlds. Returns early via the + * {@code isEnabled(ENABLE_SESSION_DETAIL)} guard — this category is opt-in. + * + * @param event The captured event. + */ + @EventHandler + public void onWorldChange(PlayerChangedWorldEvent event) { + if (!isEnabled(ENABLE_SESSION_DETAIL)) { + return; + } + LoggablePlayerEvent loggable = generateLoggablePlayerEvent( + event, PlayerEventAction.WORLD_CHANGE, null, event.getFrom().getName()); + logAndSend(loggable); + } } diff --git a/spigot/src/main/java/com/splunk/spigot/eventloggers/ProgressionEventLogger.java b/spigot/src/main/java/com/splunk/spigot/eventloggers/ProgressionEventLogger.java new file mode 100644 index 0000000..07fb58f --- /dev/null +++ b/spigot/src/main/java/com/splunk/spigot/eventloggers/ProgressionEventLogger.java @@ -0,0 +1,80 @@ +package com.splunk.spigot.eventloggers; + +import java.util.Properties; + +import org.bukkit.event.EventHandler; +import org.bukkit.event.Listener; +import org.bukkit.event.enchantment.EnchantItemEvent; +import org.bukkit.event.inventory.CraftItemEvent; +import org.bukkit.event.player.PlayerCommandPreprocessEvent; +import org.bukkit.event.player.PlayerExpChangeEvent; +import org.bukkit.event.player.PlayerFishEvent; +import org.bukkit.event.player.PlayerLevelChangeEvent; +import org.bukkit.entity.Player; + +import com.splunk.sharedmc.event_loggers.AbstractEventLogger; +import com.splunk.sharedmc.loggable_events.LoggableProgressionEvent; +import com.splunk.sharedmc.loggable_events.LoggableProgressionEvent.ProgressionAction; + +/** + * Logs progression and activity: XP, level, enchant, craft, fish, command. + */ +public class ProgressionEventLogger extends AbstractEventLogger implements Listener { + + public ProgressionEventLogger(Properties props) { + super(props); + } + + private LoggableProgressionEvent base(ProgressionAction action, Player player) { + LoggableProgressionEvent e = new LoggableProgressionEvent( + action, player.getWorld().getTime(), player.getWorld().getName()); + e.setPlayerName(player.getName()); + return e; + } + + @EventHandler + public void onExpChange(PlayerExpChangeEvent event) { + LoggableProgressionEvent e = base(ProgressionAction.EXP_CHANGE, event.getPlayer()); + e.setExpAmount(event.getAmount()); + logAndSend(e); + } + + @EventHandler + public void onLevelChange(PlayerLevelChangeEvent event) { + LoggableProgressionEvent e = base(ProgressionAction.LEVEL_CHANGE, event.getPlayer()); + e.setNewLevel(event.getNewLevel()); + logAndSend(e); + } + + @EventHandler + public void onEnchant(EnchantItemEvent event) { + LoggableProgressionEvent e = base(ProgressionAction.ENCHANT, event.getEnchanter()); + e.setDetail(event.getItem().getType().toString()); + logAndSend(e); + } + + @EventHandler + public void onCraft(CraftItemEvent event) { + if (!(event.getWhoClicked() instanceof Player)) { + return; + } + Player player = (Player) event.getWhoClicked(); + LoggableProgressionEvent e = base(ProgressionAction.CRAFT, player); + e.setDetail(event.getRecipe().getResult().getType().toString()); + logAndSend(e); + } + + @EventHandler + public void onFish(PlayerFishEvent event) { + LoggableProgressionEvent e = base(ProgressionAction.FISH, event.getPlayer()); + e.setDetail(event.getState().toString()); + logAndSend(e); + } + + @EventHandler + public void onCommand(PlayerCommandPreprocessEvent event) { + LoggableProgressionEvent e = base(ProgressionAction.COMMAND, event.getPlayer()); + e.setDetail(event.getMessage()); + logAndSend(e); + } +} diff --git a/spigot/src/main/java/com/splunk/spigot/eventloggers/ServerEventLogger.java b/spigot/src/main/java/com/splunk/spigot/eventloggers/ServerEventLogger.java new file mode 100644 index 0000000..41a61d6 --- /dev/null +++ b/spigot/src/main/java/com/splunk/spigot/eventloggers/ServerEventLogger.java @@ -0,0 +1,37 @@ +package com.splunk.spigot.eventloggers; + +import java.util.Properties; + +import org.bukkit.event.EventHandler; +import org.bukkit.event.Listener; +import org.bukkit.event.server.ServerLoadEvent; +import org.bukkit.event.weather.WeatherChangeEvent; + +import com.splunk.sharedmc.event_loggers.AbstractEventLogger; +import com.splunk.sharedmc.loggable_events.LoggableServerEvent; +import com.splunk.sharedmc.loggable_events.LoggableServerEvent.ServerAction; + +/** + * Logs server lifecycle and world-state events. + */ +public class ServerEventLogger extends AbstractEventLogger implements Listener { + + public ServerEventLogger(Properties props) { + super(props); + } + + @EventHandler + public void onServerLoad(ServerLoadEvent event) { + LoggableServerEvent e = new LoggableServerEvent(ServerAction.SERVER_START, 0L, null); + e.setMotd(event.getType().toString()); + logAndSend(e); + } + + @EventHandler + public void onWeatherChange(WeatherChangeEvent event) { + LoggableServerEvent e = new LoggableServerEvent( + ServerAction.WEATHER_CHANGE, event.getWorld().getTime(), event.getWorld().getName()); + e.setWeather(event.toWeatherState() ? "storm" : "clear"); + logAndSend(e); + } +} diff --git a/spigot/src/main/java/com/splunk/spigot/scheduling/ScheduledMetricLogger.java b/spigot/src/main/java/com/splunk/spigot/scheduling/ScheduledMetricLogger.java new file mode 100644 index 0000000..7d0cd1d --- /dev/null +++ b/spigot/src/main/java/com/splunk/spigot/scheduling/ScheduledMetricLogger.java @@ -0,0 +1,36 @@ +package com.splunk.spigot.scheduling; + +import java.util.Properties; + +import org.bukkit.plugin.Plugin; +import org.bukkit.scheduler.BukkitRunnable; + +import com.splunk.sharedmc.event_loggers.AbstractEventLogger; + +/** + * Base for loggers driven by the Bukkit scheduler rather than the event bus. + * Subclasses implement {@link #sample()}; {@link #start(Plugin, long)} schedules it. + */ +public abstract class ScheduledMetricLogger extends AbstractEventLogger { + + public ScheduledMetricLogger(Properties props) { + super(props); + } + + /** Called on each scheduled tick. Build and send the metric event(s) here. */ + protected abstract void sample(); + + /** Schedules {@link #sample()} every {@code intervalTicks} ticks. */ + public void start(Plugin plugin, long intervalTicks) { + new BukkitRunnable() { + @Override + public void run() { + try { + sample(); + } catch (Exception e) { + logger.warn("Scheduled metric sample failed", e); + } + } + }.runTaskTimer(plugin, intervalTicks, intervalTicks); + } +}